{"api_version":"1","generated_at":"2026-07-23T12:03:31+00:00","cve":"CVE-2013-5837","urls":{"html":"https://cve.report/CVE-2013-5837","api":"https://cve.report/api/cve/CVE-2013-5837.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-5837","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-5837"},"summary":{"title":"CVE-2013-5837","description":"Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5.0.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Cognos.","state":"PUBLISHED","assigner":"oracle","published_at":"2013-10-16 17:55:05","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"2.1","severity":"","vector":"AV:N/AC:H/Au:S/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","baseScore":2.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html","name":"http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update - October 2013","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/63081","name":"http://www.securityfocus.com/bid/63081","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Industry Applications CVE-2013-5837 Remote Security Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5837","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5837","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp0","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp0a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp0b","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp0c","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp1a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp1b","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp1c","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp2a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp2b","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"4.6","cpe7":"sp2c","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"5.0","cpe7":"sp0","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"5.0","cpe7":"sp0a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"5.0","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"5.0","cpe7":"sp1a","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"5.0","cpe7":"sp1b","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"5.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"5837","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"5.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T17:22:31.014Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"63081","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/63081"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-10-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5.0.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Cognos."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-11-02T09:00:00.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"63081","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/63081"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2013-5837","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5.0.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Cognos."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"63081","refsource":"BID","url":"http://www.securityfocus.com/bid/63081"},{"name":"http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2013-5837","datePublished":"2013-10-16T17:31:00.000Z","dateReserved":"2013-09-18T00:00:00.000Z","dateUpdated":"2024-08-06T17:22:31.014Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-10-16 17:55:05","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:N/A:N","baseScore":2.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp0:*:*:*:*:*:*","matchCriteriaId":"BFB19406-80FB-4D18-B445-1A3E194445B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp0a:*:*:*:*:*:*","matchCriteriaId":"4B1A0F23-7783-41C5-BB06-83F23B6C7248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp0b:*:*:*:*:*:*","matchCriteriaId":"6C5E1651-62AA-4A41-8581-22502850C95B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp0c:*:*:*:*:*:*","matchCriteriaId":"C1DB3615-C594-47A1-9CE5-2DC9689FE1EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp1:*:*:*:*:*:*","matchCriteriaId":"6A1BD5FF-334E-4463-8D90-E2B9128177EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp1a:*:*:*:*:*:*","matchCriteriaId":"7E01ED61-916A-43E3-8101-3AE70285B4C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp1b:*:*:*:*:*:*","matchCriteriaId":"099C1F29-A893-43D0-B781-F6376784FC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp1c:*:*:*:*:*:*","matchCriteriaId":"0EE76194-A139-4682-B3C3-E534DEB9699C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp2:*:*:*:*:*:*","matchCriteriaId":"75818D5D-6908-46B1-84B1-682EF39D23A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp2a:*:*:*:*:*:*","matchCriteriaId":"F165F3DC-7863-4ED9-A9E1-B531FA9DED7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp2b:*:*:*:*:*:*","matchCriteriaId":"ACBE2353-CA79-4DB0-83CC-CA3CDAD64EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:4.6:sp2c:*:*:*:*:*:*","matchCriteriaId":"56357E79-1A30-43DB-A23C-607F02D1F7F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:5.0:sp0:*:*:*:*:*:*","matchCriteriaId":"D0352291-4417-418E-BB65-C0CBFEB47597"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:5.0:sp0a:*:*:*:*:*:*","matchCriteriaId":"2F0A363C-D521-4B86-B082-E2E78B67B72E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"2E7D2B73-04D6-439F-B139-507BD64C56F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:5.0:sp1a:*:*:*:*:*:*","matchCriteriaId":"D831460D-2C83-409D-99E3-FBF25B925ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:5.0:sp1b:*:*:*:*:*:*","matchCriteriaId":"486CC7F5-2EA7-44D4-BD99-52484F484DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"22119266-C83E-4502-80D1-240DCAEA3060"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2D41FC89-990A-4418-B6BF-CBFA56938F5D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"5837","Ordinal":"1","Title":"CVE-2013-5837","CVE":"CVE-2013-5837","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"5837","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5.0.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Cognos.","Type":"Description","Title":"CVE-2013-5837"},{"CveYear":"2013","CveId":"5837","Ordinal":"2","NoteData":"2013-10-16","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"5837","Ordinal":"3","NoteData":"2013-11-02","Type":"Other","Title":"Modified"}]}}}